Set Skip Users for Monitored Program Executions

Use this group policy to specify a list of users who can run programs and commands without generating an audit trail event.

Users listed in this policy can run commands without generating an audit trail, even if those commands are listed in Set monitored programs list.

If this policy is Disabled or Not configured, by default, all users will generate an audit trail event when executing monitored commands.

This policy modifies the event.monitor.commands.user.skiplist parameter in the agent configuration file.